HP MSR SERIES Installation manual

HP MSR Router Series
Layer 3—IP Services
Command Reference(V7)
Part number: 5998-7741b
Software version: CMW710-R0304
Document version: 6PW104-20150914

i
Legal and notice information
© Copyright 2015 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or use
of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

i
Contents
ARP commands····························································································································································· 1
arp check enable······················································································································································1
arp check log enable ···············································································································································1
arp max-learning-num ··············································································································································2
arp max-learning-number ········································································································································4
arp static····································································································································································5
arp timer aging·························································································································································6
display arp································································································································································7
display arp ip-address ·············································································································································9
display arp timer aging ········································································································································ 10
display arp vpn-instance······································································································································· 11
reset arp ································································································································································· 12
Gratuitous ARP commands········································································································································13
arp ip-conflict log prompt ····································································································································· 13
arp send-gratuitous-arp ········································································································································· 13
gratuitous-arp-learning enable ····························································································································· 14
gratuitous-arp-sending enable······························································································································ 15
Proxy ARP commands················································································································································16
display local-proxy-arp ········································································································································· 16
display proxy-arp ·················································································································································· 16
local-proxy-arp enable ·········································································································································· 17
proxy-arp enable ··················································································································································· 18
ARP fast-reply commands ··········································································································································20
arp fast-reply enable ············································································································································· 20
ARP PnP commands ···················································································································································21
arp pnp··································································································································································· 21
display arp pnp ····················································································································································· 22
ARP suppression commands······································································································································23
arp suppression enable ········································································································································ 23
arp suppression push interval ······························································································································ 23
display arp suppression xconnect-group ············································································································ 24
reset arp suppression xconnect-group················································································································· 25
ARP direct route advertisement commands ··············································································································27
arp route-direct advertise······································································································································ 27
IP addressing commands···········································································································································28
display ip interface················································································································································ 28
display ip interface brief······································································································································· 30
ip address ······························································································································································ 32
ip address unnumbered········································································································································ 33
DHCP commands ·······················································································································································35
Common DHCP commands ·········································································································································· 35
dhcp client-detect··················································································································································· 35
dhcp dscp······························································································································································· 35
dhcp enable ··························································································································································· 36
dhcp log enable ···················································································································································· 36

ii
dhcp select ····························································································································································· 37
DHCP server commands················································································································································ 38
address range························································································································································ 38
bims-server ····························································································································································· 39
bootfile-name ························································································································································· 40
class option-group ················································································································································· 41
class range····························································································································································· 42
dhcp class ······························································································································································ 43
dhcp option-group················································································································································· 43
dhcp server always-broadcast ····························································································································· 44
dhcp server apply ip-pool····································································································································· 45
dhcp server bootp ignore ····································································································································· 46
dhcp server bootp reply-rfc-1048························································································································ 46
dhcp server database filename ··························································································································· 47
dhcp server database update interval ················································································································ 48
dhcp server database update now······················································································································ 49
dhcp server database update stop······················································································································ 50
dhcp server forbidden-ip ······································································································································ 50
dhcp server ip-pool ··············································································································································· 51
dhcp server ping packets ····································································································································· 52
dhcp server ping timeout ······································································································································ 53
dhcp server relay information enable ················································································································· 53
display dhcp server conflict·································································································································· 54
display dhcp server database······························································································································ 55
display dhcp server expired································································································································· 56
display dhcp server free-ip ··································································································································· 57
display dhcp server ip-in-use································································································································ 58
display dhcp server pool ······································································································································ 59
display dhcp server statistics································································································································ 61
dns-list ····································································································································································· 63
domain-name ························································································································································· 64
expired ··································································································································································· 64
forbidden-ip···························································································································································· 65
gateway-list ···························································································································································· 66
if-match ··································································································································································· 67
ip-in-use threshold·················································································································································· 69
nbns-list ··································································································································································· 70
netbios-type ···························································································································································· 70
network··································································································································································· 71
next-server ······························································································································································ 72
option······································································································································································ 73
reset dhcp server conflict ······································································································································ 74
reset dhcp server expired ····································································································································· 75
reset dhcp server ip-in-use ···································································································································· 76
reset dhcp server statistics ···································································································································· 76
static-bind ······························································································································································· 77
tftp-server domain-name········································································································································ 78
tftp-server ip-address ············································································································································· 79
valid class······························································································································································· 79
verify class······························································································································································ 80
voice-config···························································································································································· 81
vpn-instance ··························································································································································· 82
DHCP relay agent commands······································································································································· 82
dhcp relay check mac-address ···························································································································· 82

iii
dhcp relay check mac-address aging time········································································································· 83
dhcp relay client-information record ··················································································································· 84
dhcp relay client-information refresh ··················································································································· 84
dhcp relay client-information refresh enable ······································································································ 85
dhcp relay gateway ·············································································································································· 86
dhcp relay information circuit-id ·························································································································· 87
dhcp relay information enable····························································································································· 89
dhcp relay information remote-id ························································································································ 89
dhcp relay information strategy··························································································································· 90
dhcp relay release ip ············································································································································ 91
dhcp relay server-address····································································································································· 92
display dhcp relay check mac-address··············································································································· 93
display dhcp relay client-information ·················································································································· 93
display dhcp relay information···························································································································· 95
display dhcp relay server-address ······················································································································· 96
display dhcp relay statistics ································································································································· 97
gateway-list ···························································································································································· 98
remote-server·························································································································································· 99
reset dhcp relay client-information·····················································································································100
reset dhcp relay statistics····································································································································100
DHCP client commands ···············································································································································101
dhcp client dad enable·······································································································································101
dhcp client dscp ··················································································································································101
dhcp client identifier············································································································································102
display dhcp client ··············································································································································103
ip address dhcp-alloc··········································································································································105
DHCP snooping commands ········································································································································106
dhcp snooping binding database filename ·····································································································106
dhcp snooping binding database update interval ··························································································108
dhcp snooping binding database update now································································································109
dhcp snooping binding record ··························································································································109
dhcp snooping check mac-address ···················································································································110
dhcp snooping check request-message·············································································································110
dhcp snooping enable········································································································································111
dhcp snooping information circuit-id·················································································································112
dhcp snooping information enable ···················································································································113
dhcp snooping information remote-id ···············································································································114
dhcp snooping information strategy··················································································································115
dhcp snooping max-learning-num ·····················································································································116
dhcp snooping trust·············································································································································117
display dhcp snooping binding·························································································································117
display dhcp snooping binding database········································································································118
display dhcp snooping information···················································································································119
display dhcp snooping packet statistics············································································································120
display dhcp snooping trust ·······························································································································121
reset dhcp snooping binding ·····························································································································122
reset dhcp snooping packet statistics ················································································································122
BOOTP client commands ············································································································································123
display bootp client·············································································································································123
ip address bootp-alloc ········································································································································124
DNS commands ······················································································································································ 125
display dns domain·············································································································································125
display dns host···················································································································································126
display dns server ···············································································································································127

iv
display ipv6 dns server·······································································································································128
dns domain ··························································································································································129
dns dscp ·······························································································································································130
dns proxy enable·················································································································································130
dns server ·····························································································································································131
dns source-interface·············································································································································132
dns spoofing ························································································································································132
dns spoofing track···············································································································································133
dns trust-interface·················································································································································134
ip host ···································································································································································135
ipv6 dns dscp ······················································································································································136
ipv6 dns server ····················································································································································136
ipv6 dns spoofing················································································································································137
ipv6 host·······························································································································································138
reset dns host ·······················································································································································139
DDNS commands···················································································································································· 141
ddns apply policy················································································································································141
ddns dscp·····························································································································································142
ddns policy···························································································································································142
display ddns policy ·············································································································································143
interval··································································································································································144
method··································································································································································145
password······························································································································································146
ssl-client-policy ·····················································································································································147
url ··········································································································································································148
username······························································································································································150
NAT commands······················································································································································· 151
address ·································································································································································151
block-size······························································································································································152
display nat all ······················································································································································152
display nat address-group··································································································································170
display nat dns-map············································································································································172
display nat eim ····················································································································································173
display nat inbound ············································································································································176
display nat log·····················································································································································178
display nat no-pat················································································································································179
display nat outbound ··········································································································································182
display nat outbound port-block-group ·············································································································184
display nat port-block··········································································································································186
display nat port-block-group·······························································································································187
display nat server ················································································································································189
display nat server-group ·····································································································································192
display nat session ··············································································································································193
display nat static··················································································································································197
display nat statistics ············································································································································202
global-ip-pool·······················································································································································205
inside ip································································································································································206
local-ip-address····················································································································································207
nat address-group················································································································································208
nat alg ··································································································································································208
nat dns-map ·························································································································································210
nat hairpin enable···············································································································································211
nat inbound··························································································································································211

v
nat log enable······················································································································································213
nat log flow-active ···············································································································································214
nat log flow-begin ···············································································································································215
nat log flow-end···················································································································································216
nat mapping-behavior·········································································································································216
nat outbound························································································································································217
nat outbound ds-lite-b4 ·······································································································································220
nat outbound port-block-group···························································································································221
nat port-block-group ············································································································································222
nat server······························································································································································223
nat server-group···················································································································································227
nat static enable ··················································································································································228
nat static inbound················································································································································228
nat static inbound net-to-net································································································································230
nat static outbound··············································································································································232
nat static outbound net-to-net······························································································································233
port-block······························································································································································235
port-range·····························································································································································236
reset nat session···················································································································································237
Basic IP forwarding commands······························································································································ 238
display fib ····························································································································································238
Load sharing commands········································································································································· 241
bandwidth-based-sharing ···································································································································241
ip load-sharing mode··········································································································································241
Fast forwarding commands···································································································································· 243
display ip fast-forwarding aging-time················································································································243
display ip fast-forwarding cache ·······················································································································243
display ip fast-forwarding fragcache ················································································································245
ip fast-forwarding aging-time ·····························································································································246
ip fast-forwarding load-sharing··························································································································247
reset ip fast-forwarding cache····························································································································247
Flow classification commands································································································································ 249
forwarding policy················································································································································249
IPv4 adjacency table commands ··························································································································· 250
display adjacent-table·········································································································································250
IPv6 adjacency table commands ··························································································································· 253
display ipv6 adjacent-table································································································································253
IRDP commands······················································································································································· 256
ip irdp···································································································································································256
ip irdp address ····················································································································································256
ip irdp lifetime······················································································································································257
ip irdp interval ·····················································································································································258
ip irdp multicast ···················································································································································259
ip irdp preference················································································································································259
IP performance optimization commands··············································································································· 261
display icmp statistics··········································································································································261
display ip statistics ··············································································································································262
display rawip·······················································································································································264
display rawip verbose ········································································································································265
display tcp····························································································································································269

vi
display tcp-proxy ·················································································································································271
display tcp statistics·············································································································································272
display tcp verbose ·············································································································································274
display udp ··························································································································································279
display udp statistics ···········································································································································280
display udp verbose············································································································································281
ip forward-broadcast ··········································································································································285
ip icmp error-interval···········································································································································286
ip icmp source ·····················································································································································287
ip mtu····································································································································································288
ip reassemble local enable ································································································································289
ip redirects enable ··············································································································································289
ip ttl-expires enable ·············································································································································290
ip unreachables enable ······································································································································291
reset ip statistics···················································································································································292
reset tcp statistics ·················································································································································292
reset udp statistics················································································································································293
tcp mss··································································································································································293
tcp path-mtu-discovery·········································································································································294
tcp syn-cookie enable ·········································································································································295
tcp timer fin-timeout ·············································································································································295
tcp timer syn-timeout············································································································································296
tcp window ··························································································································································297
UDP helper commands ··········································································································································· 298
display udp-helper interface·······························································································································298
reset udp-helper statistics ····································································································································299
udp-helper broadcast-map··································································································································299
udp-helper enable ···············································································································································300
udp-helper multicast-map····································································································································301
udp-helper port ····················································································································································302
udp-helper server·················································································································································303
IPv6 basics commands············································································································································ 304
display ipv6 fib····················································································································································304
display ipv6 icmp statistics·································································································································305
display ipv6 interface ·········································································································································306
display ipv6 interface prefix ······························································································································311
display ipv6 nd suppression xconnect-group ···································································································312
display ipv6 neighbors ·······································································································································313
display ipv6 neighbors count·····························································································································315
display ipv6 neighbors vpn-instance·················································································································316
display ipv6 pathmtu ··········································································································································317
display ipv6 prefix ··············································································································································319
display ipv6 rawip ··············································································································································320
display ipv6 rawip verbose································································································································321
display ipv6 statistics ··········································································································································326
display ipv6 tcp-proxy ········································································································································328
display ipv6 tcp···················································································································································329
display ipv6 tcp verbose ····································································································································330
display ipv6 udp ·················································································································································335
display ipv6 udp verbose···································································································································336
ipv6 address ························································································································································341
ipv6 address anycast··········································································································································341
ipv6 address auto················································································································································342

vii
ipv6 address auto link-local ·······························································································································343
ipv6 address eui-64 ············································································································································344
ipv6 address link-local ········································································································································345
ipv6 bandwidth-based-sharing ··························································································································346
ipv6 hop-limit ·······················································································································································346
ipv6 hoplimit-expires enable ······························································································································347
ipv6 icmpv6 error-interval ··································································································································348
ipv6 icmpv6 multicast-echo-reply enable··········································································································348
ipv6 icmpv6 source·············································································································································349
ipv6 mtu································································································································································350
ipv6 nd autoconfig managed-address-flag·······································································································350
ipv6 nd autoconfig other-flag·····························································································································351
ipv6 nd dad attempts··········································································································································352
ipv6 nd ns retrans-timer ······································································································································353
ipv6 nd nud reachable-time ·······························································································································353
ipv6 nd ra halt·····················································································································································354
ipv6 nd ra hop-limit unspecified ························································································································355
ipv6 nd ra interval···············································································································································355
ipv6 nd ra no-advlinkmtu····································································································································356
ipv6 nd ra prefix ·················································································································································357
ipv6 nd ra router-lifetime ····································································································································358
ipv6 nd route-direct advertise ····························································································································358
ipv6 nd router-preference ···································································································································359
ipv6 nd suppression enable ·······························································································································360
ipv6 nd suppression push interval ·····················································································································360
ipv6 neighbor ······················································································································································361
ipv6 neighbor link-local minimize ·····················································································································362
ipv6 neighbor stale-aging ··································································································································363
ipv6 neighbors max-learning-num ·····················································································································363
ipv6 pathmtu ························································································································································365
ipv6 pathmtu age ················································································································································365
ipv6 prefer temporary-address···························································································································366
ipv6 prefix····························································································································································367
ipv6 reassemble local enable ····························································································································368
ipv6 redirects enable ··········································································································································368
ipv6 temporary-address······································································································································369
ipv6 unreachables enable··································································································································370
local-proxy-nd enable··········································································································································371
proxy-nd enable···················································································································································371
reset ipv6 nd suppression xconnect-group ·······································································································372
reset ipv6 neighbors ···········································································································································372
reset ipv6 pathmtu···············································································································································373
reset ipv6 statistics···············································································································································374
DHCPv6 commands················································································································································ 376
Common DHCPv6 commands ····································································································································376
display ipv6 dhcp duid·······································································································································376
ipv6 dhcp dscp····················································································································································376
ipv6 dhcp log enable··········································································································································377
ipv6 dhcp select ··················································································································································377
DHCPv6 server commands ·········································································································································378
address range······················································································································································378
display ipv6 dhcp option-group·························································································································379
display ipv6 dhcp pool·······································································································································382
display ipv6 dhcp prefix-pool ····························································································································383

viii
display ipv6 dhcp server ····································································································································384
display ipv6 dhcp server conflict·······················································································································385
display ipv6 dhcp server database···················································································································386
display ipv6 dhcp server expired······················································································································387
display ipv6 dhcp server ip-in-use ·····················································································································388
display ipv6 dhcp server pd-in-use····················································································································390
display ipv6 dhcp server statistics ·····················································································································392
dns-server ·····························································································································································394
domain-name ·······················································································································································395
ipv6 dhcp option-group ······································································································································395
ipv6 dhcp pool ····················································································································································396
ipv6 dhcp prefix-pool··········································································································································397
ipv6 dhcp server··················································································································································398
ipv6 dhcp server apply pool······························································································································399
ipv6 dhcp server database filename·················································································································400
ipv6 dhcp server database update interval······································································································401
ipv6 dhcp server database update now···········································································································402
ipv6 dhcp server database update stop ···········································································································403
ipv6 dhcp server forbidden-address··················································································································403
ipv6 dhcp server forbidden-prefix ·····················································································································404
network·································································································································································405
option····································································································································································406
prefix-pool ····························································································································································408
reset ipv6 dhcp server conflict ···························································································································409
reset ipv6 dhcp server expired ··························································································································409
reset ipv6 dhcp server ip-in-use··························································································································410
reset ipv6 dhcp server pd-in-use ························································································································411
reset ipv6 dhcp server statistics ·························································································································411
sip-server·······························································································································································412
static-bind ·····························································································································································413
temporary address range ···································································································································414
vpn-instance ·························································································································································415
DHCPv6 relay agent commands ································································································································416
display ipv6 dhcp relay server-address ············································································································416
display ipv6 dhcp relay statistics·······················································································································417
gateway-list ··························································································································································419
ipv6 dhcp relay gateway ···································································································································419
ipv6 dhcp relay interface-id ·······························································································································420
ipv6 dhcp relay server-address··························································································································421
remote-server························································································································································422
reset ipv6 dhcp relay statistics ···························································································································423
DHCPv6 client commands···········································································································································423
display ipv6 dhcp client ·····································································································································423
display ipv6 dhcp client statistics ······················································································································426
ipv6 address dhcp-alloc ·····································································································································427
ipv6 dhcp client dscp··········································································································································428
ipv6 dhcp client pd ·············································································································································428
ipv6 dhcp client stateless enable·······················································································································429
ipv6 dhcp client stateful······································································································································430
reset ipv6 dhcp client statistics···························································································································431
DHCPv6 snooping commands····································································································································431
display ipv6 dhcp snooping binding ················································································································432
display ipv6 dhcp snooping binding database·······························································································433
display ipv6 dhcp snooping packet statistics···································································································434

ix
display ipv6 dhcp snooping trust ······················································································································435
ipv6 dhcp snooping binding database filename·····························································································435
ipv6 dhcp snooping binding database update interval··················································································437
ipv6 dhcp snooping binding database update now·······················································································437
ipv6 dhcp snooping binding record ·················································································································438
ipv6 dhcp snooping check request-message····································································································439
ipv6 dhcp snooping enable ·······························································································································439
ipv6 dhcp snooping max-learning-num·············································································································440
ipv6 dhcp snooping option interface-id enable·······························································································441
ipv6 dhcp snooping option interface-id string ·································································································441
ipv6 dhcp snooping option remote-id enable ··································································································442
ipv6 dhcp snooping option remote-id string ····································································································443
ipv6 dhcp snooping trust ····································································································································443
reset ipv6 dhcp snooping binding ····················································································································444
reset ipv6 dhcp snooping packet statistics ·······································································································444
IPv6 fast forwarding commands····························································································································· 446
display ipv6 fast-forwarding aging-time ···········································································································446
display ipv6 fast-forwarding cache···················································································································446
ipv6 fast-forwarding aging-time·························································································································448
ipv6 fast-forwarding load-sharing ·····················································································································449
reset ipv6 fast-forwarding cache ·······················································································································449
Tunneling commands ·············································································································································· 451
bandwidth ····························································································································································451
default···································································································································································451
description····························································································································································452
destination····························································································································································453
display ds-lite b4 information·····························································································································454
display interface tunnel·······································································································································455
ds-lite enable························································································································································460
interface tunnel ····················································································································································460
mtu ········································································································································································462
reset counters interface ·······································································································································463
service···································································································································································464
service standby····················································································································································465
shutdown ······························································································································································466
source ···································································································································································467
tunnel dfbit enable···············································································································································468
tunnel discard ipv4-compatible-packet··············································································································469
tunnel tos ······························································································································································469
tunnel ttl ································································································································································470
tunnel vpn-instance ··············································································································································471
GRE commands······················································································································································· 472
gre checksum ·······················································································································································472
gre key··································································································································································472
keepalive ······························································································································································473
ADVPN commands ················································································································································· 475
VAM server commands ···············································································································································475
authentication-algorithm ·····································································································································475
authentication-method·········································································································································476
display vam server address-map ·······················································································································476
display vam server ipv6 address-map ··············································································································481
display vam server ipv6 private-network ··········································································································485

x
display vam server private-network···················································································································487
display vam server statistics ·······························································································································488
encryption-algorithm············································································································································491
hub-group ·····························································································································································492
hub ipv6 private-address····································································································································493
hub private-address·············································································································································494
keepalive ······························································································································································495
pre-shared-key (ADVPN domain view)··············································································································496
retry interval ·························································································································································497
reset vam server address-map····························································································································497
reset vam server ipv6 address-map···················································································································498
reset vam server statistics····································································································································499
server enable ·······················································································································································499
shortcut interest ····················································································································································500
shortcut ipv6 interest ···········································································································································501
spoke ipv6 private-address ································································································································502
spoke private-address ·········································································································································503
vam server advpn-domain ··································································································································504
vam server enable ···············································································································································504
vam server listen-port ··········································································································································505
VAM client commands·················································································································································506
advpn-domain······················································································································································506
client enable·························································································································································507
display vam client fsm·········································································································································507
display vam client shortcut interest ····················································································································510
display vam client shortcut ipv6 interest ···········································································································511
display vam client statistics·································································································································513
dumb-time·····························································································································································517
pre-shared-key (VAM client view) ······················································································································518
reset vam client fsm ·············································································································································518
reset vam client ipv6 fsm ····································································································································519
reset vam client statistics·····································································································································520
retry·······································································································································································520
server primary······················································································································································521
server secondary ·················································································································································522
user ·······································································································································································523
vam client enable ················································································································································524
vam client name ··················································································································································525
ADVPN tunnel commands···········································································································································525
advpn ipv6 network ············································································································································525
advpn network·····················································································································································526
advpn session dumb-time····································································································································527
advpn session idle-time·······································································································································528
advpn source-port················································································································································529
display advpn ipv6 session································································································································529
display advpn session·········································································································································534
keepalive ······························································································································································540
reset advpn ipv6 session ····································································································································541
reset advpn ipv6 session statistics ·····················································································································541
reset advpn session ·············································································································································542
reset advpn session statistics ······························································································································543
vam client ·····························································································································································543
vam ipv6 client ····················································································································································544

xi
WAAS commands ·················································································································································· 546
class ······································································································································································546
display waas class ··············································································································································547
display waas policy ············································································································································548
display waas session ··········································································································································549
display waas statistics dre··································································································································553
display waas status ·············································································································································556
display waas tfo auto-discovery blacklist··········································································································557
match tcp······························································································································································558
optimize································································································································································559
passthrough··························································································································································560
reset waas cache dre··········································································································································561
reset waas statistics dre ······································································································································562
reset waas tfo auto-discovery blacklist··············································································································562
waas apply policy···············································································································································563
waas class····························································································································································563
waas config remove-all·······································································································································564
waas config restore-default ································································································································565
waas policy··························································································································································565
waas tfo auto-discovery blacklist enable ··········································································································571
waas tfo auto-discovery blacklist hold-time·······································································································571
waas tfo base-congestion-window·····················································································································572
waas tfo keepalive ··············································································································································573
waas tfo optimize dre ·········································································································································573
waas tfo optimize lz············································································································································574
waas tfo receive-buffer········································································································································574
AFT commands························································································································································ 576
address ·································································································································································576
aft address-group·················································································································································577
aft enable ·····························································································································································577
aft log enable·······················································································································································578
aft prefix-ivi ··························································································································································579
aft prefix-nat64 ····················································································································································579
aft turn-off tos ·······················································································································································580
aft turn-off traffic-class ·········································································································································581
aft v4tov6 destination ·········································································································································581
aft v4tov6 source·················································································································································582
aft v6server ··························································································································································584
aft v6tov4 source·················································································································································585
display aft address-group···································································································································586
display aft address-mapping······························································································································587
display aft configuration·····································································································································589
display aft no-pat·················································································································································590
display aft port-block···········································································································································592
display aft session ···············································································································································594
display aft statistics ·············································································································································597
reset aft session····················································································································································599
reset aft statistics··················································································································································600
Support and other resources ·································································································································· 601
Contacting HP ······························································································································································601
Subscription service ············································································································································601
Related information······················································································································································601
Documents····························································································································································601

xii
Websites·······························································································································································601
Conventions ··································································································································································602
Index ········································································································································································ 604

1
ARP commands
Commands and descriptions for centralized devices apply to the following routers:
•MSR1002-4/1003-8S.
•MSR2003.
•MSR2004-24/2004-48.
•MSR3012/3024/3044/3064.
Commands and descriptions for distributed devices apply to MSR4060 and MSR4080 routers.
arp check enable
Use arp check enable to enable dynamic ARP entry check.
Use undo arp check enable to disable dynamic ARP entry check.
Syntax
arp check enable
undo arp check enable
Default
Dynamic ARP entry check is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Dynamic ARP entry check disables a device from supporting dynamic ARP entries with multicast MAC
addresses. The device cannot learn dynamic ARP entries containing multicast MAC addresses. You
cannot manually add static ARP entries that contain multicast MAC addresses.
When dynamic ARP entry check is disabled, ARP entries containing multicast MAC addresses are
supported. The device can learn dynamic ARP entries containing multicast MAC addresses obtained
from the ARP packets sourced from a unicast MAC address. You can also manually add static ARP entries
containing multicast MAC addresses.
Examples
# Enable dynamic ARP entry check.
<Sysname> system-view
[Sysname] arp check enable
arp check log enable
Use arp check log enable to enable the ARP logging function.

2
Use undo arp check log enable to disable the ARP logging function.
Syntax
arp check log enable
undo arp check log enable
Default
ARP logging is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
This function enables a device to log ARP events when ARP cannot resolve IP addresses correctly. The
device can log the following ARP events:
•On a proxy ARP-disabled interface, the target IP address of a received ARP packet is not one of the
following IP addresses:
{The IP address of the receiving interface.
{The virtual IP address of the VRRP group.
{The public IP address after NAT.
•The sender IP address of a received ARP reply conflicts with one of the following IP addresses:
{The IP address of the receiving interface.
{The virtual IP address of the VRRP group.
{The public IP address after NAT.
The device sends ARP log messages to the information center. You can use the info-center source
command to specify the log output rules for the information center. For more information about
information center, see Network Management and Monitoring Configuration Guide.
The device can generate a large amount of ARP logs. To conserve system resources, enable ARP logging
only when you are troubleshooting or debugging ARP events.
Examples
# Enable ARP logging.
<Sysname> system-view
[Sysname] arp check log enable
arp max-learning-num
Use arp max-learning-num to set the maximum number of dynamic ARP entries that an interface can
learn.
Use undo arp max-learning-num to restore the default.
Syntax
arp max-learning-num number
undo arp max-learning-num

3
Default
The following matrix shows the default values for the number argument:
Hardware Default
MSR1002-4/1003-8S 4096
MSR2003 4096
MSR2004-24/2004-48 4096
MSR3012/3024/3044/3064 4096
MSR4060/4080 16384
Views
Layer 2 Ethernet interface/Layer 2 aggregate interface view
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/aggregate subinterface view
VLAN interface view
Predefined user roles
network-admin
Parameters
number: Specifies the maximum number of dynamic ARP entries for an interface.
The following matrix shows the value ranges for the number argument:
Hardware Value ran
g
e
MSR1002-4/1003-8S 0 to 4096
MSR2003 0 to 4096
MSR2004-24/2004-48 0 to 4096
MSR3012/3024/3044/3064 0 to 4096
MSR4060/4080 0 to 16384
Usage guidelines
An interface can dynamically learn ARP entries. To prevent an interface from holding too many ARP
entries, you can set the maximum number of dynamic ARP entries that the interface can learn. When the
maximum number is reached, the interface stops learning ARP entries.
When the number argument is set to 0, the interface is disabled from learning dynamic ARP entries.
Examples
# Specify VLAN-interface 40 to learn a maximum of 500 dynamic ARP entries.
<Sysname> system-view
[Sysname] interface vlan-interface 40
[Sysname-Vlan-interface40] arp max-learning-num 500
# Specify GigabitEthernet 2/0/1 to learn a maximum of 1000 dynamic ARP entries.
<Sysname> system-view

4
[Sysname] interface gigabitethernet 2/0/1
[Sysname-GigabitEthernet2/0/1] arp max-learning-num 1000
# Specify Layer 2 aggregate interface Bridge-Aggregation 1 to learn a maximum of 1000 dynamic ARP
entries.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] arp max-learning-num 1000
# Specify Layer 3 aggregate interface Route-Aggregation 1 to learn a maximum of 1000 dynamic ARP
entries.
<Sysname> system-view
[Sysname] interface route-aggregation 1
[Sysname-Route-Aggregation1] arp max-learning-num 1000
arp max-learning-number
Use arp max-learning-number to set the maximum number of dynamic ARP entries that a device can
learn.
Use undo arp max-learning-number to restore the default.
Syntax
Centralized devices in standalone mode:
arp max-learning-number number
undo arp max-learning-number
Distributed devices in standalone mode/centralized devices in IRF mode:
arp max-learning-number number slot slot-number
undo arp max-learning-number slot slot-number
Distributed devices in IRF mode:
arp max-learning-number number chassis chassis-number slot slot-number
undo arp max-learning-number chassis chassis-number slot slot-number
Default
The following matrix shows the default values for the number argument:
Hardware Default
MSR1002-4/1003-8S 4096
MSR2003 4096
MSR2004-24/2004-48 4096
MSR3012/3024/3044/3064 4096
MSR4060/4080 16384
Views
System view

5
Predefined user roles
network-admin
Parameters
number: Specifies the maximum number of dynamic ARP entries for a device.
The following matrix shows the value ranges for the number argument:
Hardware Value ran
g
e
MSR1002-4/1003-8S 0 to 4096
MSR2003 0 to 4096
MSR2004-24/2004-48 0 to 4096
MSR3012/3024/3044/3064 0 to 4096
MSR4060/4080 0 to 16384
slot slot-number: Specifies a card by its slot number. (Distributed devices in standalone mode.)
slot slot-number: Specifies an IRF member device by its member ID. (Centralized devices in IRF mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the
slot number of the card. (Distributed devices in IRF mode.)
Usage guidelines
A device can dynamically learn ARP entries. To prevent a device from holding too many ARP entries, you
can set the maximum number of dynamic ARP entries that the device can learn. When the maximum
number is reached, the device stops learning ARP entries.
When the number argument is set to 0, the device is disabled from learning dynamic ARP entries.
Examples
# Set the card in slot 1 to learn a maximum of 64 dynamic ARP entries.
<Sysname> system-view
[Sysname] arp max-learning-number 64 slot 1
arp static
Use arp static to configure a static ARP entry.
Use undo arp to remove an ARP entry.
Syntax
arp static ip-address mac-address [ vlan-id interface-type interface-number ][ vpn-instance
vpn-instance-name ]
undo arp ip-address [ vpn-instance-name ]
Default
No static ARP entries are configured.
Views
System view

6
Predefined user roles
network-admin
Parameters
ip-address: Specifies an IP address for the static ARP entry.
mac-address: Specifies a MAC address for the static ARP entry, in the format of H-H-H.
vlan-id: Specifies the ID of a VLAN to which the static ARP entry belongs. The value range is 1 to 4094.
The VLAN and VLAN interface must already exist.
interface-type interface-number: Specifies an interface by its type and number. Make sure the interface
belongs to the specified VLAN.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN for the static ARP entry. The VPN instance
name is a case-sensitive string of 1 to 31 characters. The VPN instance must already exist. To specify a
static ARP entry on the public network, do not specify this option.
Usage guidelines
A static ARP entry is manually configured and maintained. It does not age out and cannot be overwritten
by any dynamic ARP entry.
Static ARP entries can be classified into long and short static ARP entries. A short static ARP entry
contains an IP-to-MAC mapping. A long static ARP entry contains an IP-to-MAC mapping, a VLAN, and
an output interface.
A static ARP entry is effective when the device operates correctly.
When the VLAN or VLAN interface is deleted, long static ARP entries in the VLAN are deleted, and
resolved short static ARP entries in the VLAN become unresolved.
A resolved short static ARP entry becomes unresolved upon certain events. For example, it is unresolved
if the output interface is down.
A long static ARP entry is ineffective when the corresponding VLAN interface or output interface is down.
An ineffective long static ARP entry cannot be used to forward packets.
If you specify both the vlan-id and ip-address arguments, the IP address of the corresponding VLAN
interface must be on the same network as the specified IP address.
If you do not specify a VPN, the undo arp command removes ARP entries only for the public network.
Examples
# Configure a static ARP entry that contains IP address 202.38.10.2, MAC address 00e0-fc01-0000,
and output interface GigabitEthernet 2/0/1 in VLAN 10.
<Sysname> system-view
[Sysname] arp static 202.38.10.2 00e0-fc01-0000 10 gigabitethernet 2/0/1
Related commands
•display arp
•reset arp
arp timer aging
Use arp timer aging to set the aging timer for dynamic ARP entries.
Use undo arp timer aging to restore the default.